Gateway processing method, virtual access gateway, virtual service gateway and related devices

Abstract

The application provides a gateway processing method, a virtual access gateway, a virtual service gateway and related equipment, relates to the field of convergence edges, and the method is applied to the virtual access gateway. The method comprises the following steps: receiving a first tunnel message from a user side; extracting a user identifier and a user message from the first tunnel message, and determining a virtual service gateway corresponding to the user side according to the user identifier; sending the user message to the virtual service gateway, so that the virtual service gateway performs service processing and network address conversion on the user message, and sends the processed user message to a bridge port corresponding to the traffic type of the user message in the virtual access gateway; receiving the processed user message through the bridge port, encapsulating the processed user message into a second tunnel message, and sending the second tunnel message to a service server corresponding to the bridge port. The edge cloud gateway can be divided according to access logic and service logic, so that the user access logic and the service logic can be ensured to be clear.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of converged edge, in particular to a gateway processing method, a virtual access gateway, a virtual service gateway, a converged edge cloud gateway system, an edge device and a computer readable storage medium. BACKGROUND

[0002] Converged edge is a new technology form based on the convergence of new metropolitan area networks, cloud computing power, cloud storage and cloud security capabilities, which can provide users with cloud network services based on virtual local area networks in a nearby, real-time, secure and self-service manner. In related technologies, the gateway function set deployed in the edge cloud side in a virtualization manner is called an edge cloud gateway, which is usually constructed in a "forwarding and control separation" mode. However, this construction method can easily lead to confusion of user access logic and service logic. SUMMARY

[0003] The purpose of the present application is to provide a gateway processing method, a virtual access gateway, a virtual service gateway, a converged edge cloud gateway system, an edge device and a computer readable storage medium, which can divide the edge cloud gateway according to the access logic and the service logic, so as to ensure the clarity of the user access logic and the service logic.

[0004] To solve the above technical problems, the present application provides a gateway processing method applied to a virtual access gateway, the method comprising:

[0005] receiving a first tunnel message from a user side;

[0006] extracting a user identifier and a user message from the first tunnel message, and determining a virtual service gateway corresponding to the user side according to the user identifier;

[0007] sending the user message to the virtual service gateway, so that the virtual service gateway performs service processing and network address translation on the user message, and sends the processed user message to a bridge port corresponding to a traffic type of the user message in the virtual access gateway;

[0008] receiving the processed user message through the bridge port, encapsulating the processed user message into a second tunnel message, and sending the second tunnel message to a service server corresponding to the bridge port.

[0009] Preferably, the extracting of the user identifier and the user message from the first tunnel message, and the determining of the virtual service gateway corresponding to the user side according to the user identifier, comprises:

[0010] extracting a VLAN message from the first tunnel message;

[0011] extracting VLAN information from the VLAN message and the user message;

[0012] determining a virtual service gateway corresponding to the user side according to the VLAN information.

[0013] Preferably, the VLAN information comprises inner-layer VLAN information and outer-layer VLAN information, and the determining of the virtual service gateway corresponding to the user side according to the VLAN information comprises:

[0014] determining the virtual service gateway corresponding to the user side according to the outer-layer VLAN information;

[0015] Correspondingly, the sending of the user message to the virtual service gateway comprises:

[0016] sending the user message and the inner-layer VLAN information to the virtual service gateway, so that the virtual service gateway determines the virtual gateway corresponding to the user side according to the inner-layer VLAN information, and sends the user message to the virtual gateway for service processing and network address translation.

[0017] Preferably, the processed user message is marked with the inner-layer VLAN information, and before the processed user message is encapsulated into a second tunnel message, the method further comprises:

[0018] marking the processed user message with the outer-layer VLAN information to obtain an updated VLAN message;

[0019] Correspondingly, the encapsulation of the processed user message into a second tunnel message comprises:

[0020] encapsulating the updated VLAN message into the second tunnel message.

[0021] Preferably, the sending of the user message to the virtual service gateway comprises:

[0022] sending the user message to a first memory interface of the virtual service gateway;

[0023] Correspondingly, the receiving of the processed user message through the bridge port comprises:

[0024] receiving, through the bridge port, the processed user message returned by the virtual service gateway through a second memory interface.

[0025] Preferably, the service server is a cloud server or a broadband access server.

[0026] The application further provides a gateway processing method applied to a virtual service gateway, the method comprising:

[0027] receiving a user message from a user side sent by a virtual access gateway;

[0028] determining a traffic type of the user message, and performing service processing and network address translation on the user message;

[0029] sending the processed user message to a bridge port corresponding to the traffic type in the virtual access gateway, so that the virtual access gateway sends the processed user message to a service server corresponding to the bridge port.

[0030] Preferably, the receiving a user message from a user side sent by a virtual access gateway comprises:

[0031] receiving the user message from the user side and inner VLAN information sent by the virtual access gateway;

[0032] Correspondingly, the performing service processing and network address translation on the user message comprises:

[0033] determining a virtual gateway corresponding to the user side according to the inner VLAN information, and sending the user message to the virtual gateway for service processing and network address translation.

[0034] Preferably, the sending the processed user message to a bridge port corresponding to the traffic type in the virtual access gateway comprises:

[0035] labeling the inner VLAN information for the processed user message, and sending the labeled user message to the bridge port corresponding to the traffic type in the virtual access gateway.

[0036] Preferably, the receiving a user message from a user side sent by a virtual access gateway comprises:

[0037] receiving the user message sent by the virtual access gateway through a first memory interface;

[0038] Correspondingly, the sending the processed user message to a bridge port corresponding to the traffic type in the virtual access gateway comprises:

[0039] sending the processed user message to the bridge port corresponding to the traffic type in the virtual access gateway through a second memory interface.

[0040] Preferably, the determining a traffic type of the user message, and performing service processing and network address translation on the user message comprises:

[0041] when determining that the user message is the online traffic type, performing service processing on the user message, and performing network address translation on the user message based on the wide area network address of the user side;

[0042] Correspondingly, the sending of the processed user message to the bridge port corresponding to the traffic type in the virtual access gateway comprises:

[0043] The processed user message is sent to the bridge port corresponding to the online traffic type in the virtual access gateway, so that the virtual access gateway sends the processed user message to the broadband access server.

[0044] Preferably, the determination of the traffic type of the user message, the service processing on the user message, and the network address translation comprise:

[0045] When determining that the user message is the cloud access traffic type, performing service processing on the user message, performing network address translation on the user message based on the private network address corresponding to the cloud side of the user side, and modifying the target address of the user message to the network address of the cloud server.

[0046] Correspondingly, the sending of the processed user message to the bridge port corresponding to the traffic type in the virtual access gateway comprises:

[0047] The processed user message is sent to the bridge port corresponding to the cloud access traffic type in the virtual access gateway, so that the virtual access gateway sends the processed user message to the cloud server.

[0048] Preferably, the service processing comprises any one or a combination of multiple of DHCP, PPPoE dialing, IPoE dialing, QOS, or security authentication.

[0049] The application also provides a virtual access gateway, comprising:

[0050] A receiving module is configured to receive a first tunnel message from a user side;

[0051] A virtual service gateway confirmation module is configured to extract a user identifier and a user message from the first tunnel message, and determine a virtual service gateway corresponding to the user side according to the user identifier;

[0052] A virtual service gateway forwarding module is configured to send the user message to the virtual service gateway, so that the virtual service gateway performs service processing and network address translation on the user message, and sends the processed user message to a bridge port corresponding to the traffic type of the user message in the virtual access gateway.

[0053] The sending module is configured to receive the processed user message through the bridge port, encapsulate the processed user message into a second tunnel message, and send the second tunnel message to a service server corresponding to the bridge port.

[0054] The application further provides a virtual service gateway, comprising:

[0055] The receiving module is configured to receive a user message from a user side sent by the virtual access gateway.

[0056] The service processing module is configured to determine a traffic type of the user message, and perform service processing and network address translation on the user message.

[0057] The sending module is configured to send the processed user message to a bridge port corresponding to the traffic type in the virtual access gateway, so that the virtual access gateway sends the processed user message to a service server corresponding to the bridge port.

[0058] The application further provides a converged edge cloud gateway system, comprising a virtual access gateway and a virtual service gateway.

[0059] The virtual access gateway is configured to perform the gateway processing method applied to the virtual access gateway as described above.

[0060] The virtual service gateway is configured to perform the gateway processing method applied to the virtual service gateway as described above.

[0061] The application further provides an edge device, comprising:

[0062] The memory is configured to store a computer program.

[0063] The processor is configured to perform the gateway processing method applied to the virtual access gateway and / or the gateway processing method applied to the virtual service gateway when the computer program is executed.

[0064] The application further provides a computer readable storage medium, wherein the computer readable storage medium stores computer executable instructions, and the computer executable instructions are loaded and executed by a processor to implement the gateway processing method applied to the virtual access gateway and / or the gateway processing method applied to the virtual service gateway.

[0065] The application provides a gateway processing method applied to a virtual access gateway, and the method comprises the following steps: receiving a first tunnel message from a user side; extracting a user identifier and a user message from the first tunnel message, and determining a virtual service gateway corresponding to the user side according to the user identifier; sending the user message to the virtual service gateway, so that the virtual service gateway performs service processing and network address translation on the user message, and sends the processed user message to a bridge port corresponding to a traffic type of the user message in the virtual service gateway; receiving the processed user message through the bridge port, encapsulating the processed user message into a second tunnel message, and sending the second tunnel message to a service server corresponding to the bridge port.

[0066] It can be seen that the application can divide the access function and the service processing into the virtual access gateway and the virtual service gateway respectively. Specifically, the virtual access gateway can receive a first tunnel message from a user side, and extract a user identifier and a user message from the first tunnel message. Then, the virtual access gateway can determine a virtual service gateway corresponding to the user side according to the user identifier, and send the user message to the virtual service gateway, so that the virtual service gateway performs service processing and network address translation on the user message, and sends the processed user message to a bridge port corresponding to a traffic type of the user message in the virtual service gateway. Further, the virtual access gateway can send the processed user message to a service server corresponding to the bridge port when the virtual access gateway receives the processed user message through the bridge port. That is, the virtual access gateway in the application can provide traffic access of the user side, and can forward the user traffic east-west and north-south, while the virtual service gateway can provide intranet service function for the user side, and can perform traffic distribution according to the type of the user traffic. Furthermore, the application can divide the access logic and the service logic according to the division level, so as to ensure that the user access logic and the service logic are clear. The application also provides a gateway processing method applied to a virtual service gateway, a virtual access gateway, a virtual service gateway, an edge cloud gateway system, an edge device and a computer readable storage medium, which have the above beneficial effects. BRIEF DESCRIPTION OF DRAWINGS

[0067] In order to more clearly illustrate the technical solutions in the embodiments of the application or the prior art, the following will briefly introduce the drawings needed to be used in the embodiments or the prior art description. Obviously, the drawings in the following description are only the embodiments of the application, and for those skilled in the art, other drawings can also be obtained without creative labor based on the provided drawings.

[0068] Figure 1 The structure block diagram of the fusion edge cloud gateway system provided by the embodiments of the application;

[0069] Figure 2 A flow chart of a gateway processing method provided by an embodiment of the present application;

[0070] Figure 3 A flow chart of another gateway processing method provided by an embodiment of the present application;

[0071] Figure 4 A schematic diagram of a networking architecture provided by an embodiment of the present application;

[0072] Figure 5 A data flow schematic diagram under an Internet access scheme provided by an embodiment of the present application;

[0073] Figure 6 A data flow schematic diagram under a local edge cloud service access scheme provided by an embodiment of the present application;

[0074] Figure 7 A message transceiving flow schematic diagram under an Internet access scheme provided by an embodiment of the present application;

[0075] Figure 8 A message transceiving flow schematic diagram under a local edge cloud service access scheme provided by an embodiment of the present application;

[0076] Figure 9 A schematic diagram of a virtual access gateway provided by an embodiment of the present application;

[0077] Figure 10 A structural block diagram of a virtual service gateway provided by an embodiment of the present application;

[0078] Figure 11 A structural block diagram of another converged edge cloud gateway system provided by an embodiment of the present application. DETAILED DESCRIPTION

[0079] In order to make the objects, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are some but not all of the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present application.

[0080] Fusion edge is a new technology form based on the fusion of new metropolitan area network, cloud computing power, cloud storage and cloud security capabilities, which can provide users with nearby, real-time, secure and self-service cloud network services based on virtual local area network. In the related technology, the gateway function set deployed on the edge cloud side is called edge cloud gateway, which is usually constructed in a "forwarding and control separation" mode. However, this construction method is easy to cause user access logic and business logic confusion, and is not conducive to virtual machine deployment. In view of this, the present application can provide a gateway processing method, which can divide the edge cloud gateway according to the access logic and the business logic, so as to ensure the separation of the user access logic and the business logic, thereby ensuring the clear deployment of the user access logic and the business logic, and being more suitable for virtual machine deployment.

[0081] For ease of understanding, the present application will first introduce the system environment applicable to the present method. Please refer to Figure 1 , Figure 1 The structure block diagram of a fusion edge cloud gateway system provided by the present application is shown in the figure. The fusion edge cloud gateway system 20 can be divided into two kinds of edge cloud gateways according to the access logic and the business logic, which are virtual access gateway 21 (vSwitch) and virtual service gateway 22 (vCPE), wherein the virtual service gateway 22 can be set up multiple to meet the needs of multiple users. It should be pointed out that the virtual service gateway 22 is only connected with the virtual access gateway 21; while the virtual access gateway 21 is further connected with multiple user side devices 10, service servers 31 and 32 through tunnels. In other words, the virtual access gateway 21 communicates with the user side devices 10, service servers 31 and 32 through tunnels. It is worth noting that multiple user side devices 10 can share the same tunnel, while the virtual access gateway 21 and the service servers 31 and 32 need to be separately set up tunnels. It should be pointed out here that users usually have multiple terminal devices, which can communicate with the outside world through routers and ONU devices (Optical Network Unit, optical modem). For example, in a home scenario, multiple terminal devices (such as mobile phones, computers, televisions) of a user can be connected with a wireless router in the home, and the wireless router is further connected with an optical modem, so that the terminal devices of the user communicate with the outside world through the link of the wireless router and the optical modem. For ease of description, the present application particularly refers to the whole of the terminal device, the router and the optical modem as the user side device 10. It should also be pointed out that the tunnel can usually be provided by a switch device (not shown in the figure). In other words, between the user side device 10 and the virtual access gateway 21, and between the service server 32 and the virtual access gateway 21, there can be several switch devices, for example, the user side device 10 and the virtual access gateway 21 can build a tunnel through A-Leaf switch and DC-Leaf switch in the metropolitan area network. Figure 1 ​

[0082] Further, the virtual access gateway 21 is responsible for accessing the local area network traffic (LAN traffic) from the user side device 10 and forwarding the LAN traffic to the corresponding virtual service gateway 22 for service processing and network address translation; the virtual access gateway 21 is also responsible for further forwarding the user traffic returned by the virtual service gateway 22 after processing the LAN traffic to the service server 31 or 32. The virtual service gateway 22 is responsible for providing service functions and network address translation for the user side, and can distribute the user traffic obtained after processing according to the traffic type to the corresponding service server 31 or 32, wherein the service functions can be, for example, DHCP (Dynamic Host Configuration Protocol), PPPoE dialing (Point-to-Point Protocol Over Ethernet), IPoE dialing (IP over Ethernet), QOS (Quality of Service), and security authentication, etc.; and the service server 31 or 32 can be, for example, a broadband access server (vBRAS, Virtual Broadband Remote Access Server) and a cloud server (Cloud Servers). In other words, the virtual service gateway in the embodiment of the present application can replicate the modem capability of the user side ONU (ONU, Optical Network Unit) and provide the user side with intranet service functions, and further, the embodiment of the present application can extend the user local area network range to the edge cloud, and provide the user side with intranet management functions by the converged edge cloud gateway system, rather than by the ONU device of the user side. On this basis, the ONU device of the user side only needs to encapsulate and transparently transmit the original user packet issued by the user side to the virtual access gateway. In this way, the user terminal can more conveniently access the edge cloud, thereby improving the convenience of using the edge cloud for the user.

[0083] It is worth noting that the virtual access gateway 21 and the virtual service gateway 22 in the embodiment of the present application can be deployed in the form of a virtual machine; and since the virtual access gateway 21 and the virtual service gateway 22 only need to communicate through packet forwarding, there is no need to maintain a connection relationship, so the coupling between the access logic and the service logic in the converged edge cloud gateway system can be reduced, and the convenience of expanding the virtual access gateway 21 and the virtual service gateway 22 can be improved.

[0084] It should be noted that the number of virtual service gateways 22, the number of user side devices 10 and the number of service servers 31 or 32 that can be set in a single converged edge cloud gateway system are not limited by the embodiments of the present application, and the above numbers can be set according to actual application requirements.

[0085] Based on the above introduction of the converged edge cloud gateway system, the gateway processing method provided by the embodiments of the present application will be introduced in detail. The embodiments of the present application will first introduce the implementation of the method on the virtual access gateway side, please refer to Figure 2 , Figure 2 The flowchart of the gateway processing method provided by the embodiments of the present application, the method can include:

[0086] S201, receiving a first tunnel message from the user side.

[0087] In the embodiments of the present application, the virtual access gateway can first provide the user side with the access function of local area network traffic, and can forward the local area network traffic to the virtual service gateway. Specifically, since the tunnel is set between the user side and the virtual access device, the user side needs to send the user message to the virtual access device through the tunnel, and the user message will be further encapsulated into a tunnel message before tunnel transmission. Therefore, the virtual access device will first receive the tunnel message from the user side. In addition, it can be understood that in order to distinguish the traffic of different user sides, a virtual local area network (VLAN, Virtual LAN) needs to be built between the user side and the virtual service gateway, and before the user message is encapsulated into the tunnel message, the ONU device of the user side or the switch device in the metropolitan area network needs to mark the user identifier corresponding to the user side for the user message, wherein the user identifier is used to uniquely identify the user side and uniquely identify the virtual local area network between the user side and the virtual service gateway. Therefore, the tunnel message from the user side at least contains the user identifier and the user message. After receiving the tunnel message from the user side, the virtual access gateway needs to extract the user identifier and the user message from the message, and determine the virtual service gateway corresponding to the user side according to the user identifier, so as to forward the user message to the virtual service gateway for processing. It should be noted that "first" in "first tunnel message" is only used to distinguish the tunnel message from the user side from other tunnel messages mentioned in the embodiments of the present application.

[0088] Further, since the telecom operator usually aggregates and transmits the traffic on the user side, in the embodiment of the present application, multiple users can share the tunnel between the virtual access device and the virtual access gateway. It should be noted that the embodiment of the present application does not limit the specific type of the tunnel, for example, it can be an SRv6 tunnel, or a VxLAN tunnel, which can be set according to actual application requirements. In order to adapt to the structure of the new metropolitan area network, in the embodiment of the present application, the tunnel between the user side and the virtual access gateway can be an SRv6 tunnel. In the case of SRv6 tunnel, the ONU device on the user side can further encapsulate the user message into a VLAN message. The embodiment of the present application does not limit how the ONU device encapsulates the user message, for example, it can be encapsulated in a single-layer VLAN format, or it can be encapsulated in a multi-layer VLAN format (such as QinQ format), which can be set according to actual application requirements. Further, in order to effectively distinguish the tunnel, the embodiment of the present application can pre-set the corresponding tunnel protocol processing logic (such as SRv6 processing logic) for the tunnel between the user side and the virtual access gateway, and establish a corresponding relationship between the tunnel identifier (SID) of the tunnel and the tunnel protocol processing logic. Further, when the first tunnel message is received, the message can be distributed to the corresponding SRv6 processing logic according to the SID in the message.

[0089] S202, extract the user identifier and the user message from the first tunnel message, and determine the corresponding virtual service gateway of the user side according to the user identifier.

[0090] As described above, since the virtual local area network can be constructed between the user side and the virtual service gateway, the virtual access gateway needs to determine the corresponding virtual service gateway of the user side according to the user identifier contained in the first tunnel message, and send the user message to the virtual service gateway for processing. The embodiment of the present application does not limit the specific form of the user identifier, for example, when the tunnel between the user side and the virtual access gateway is VxLAN, the user identifier can be VNI identifier (VXLAN Network Identifier, VXLAN network identifier); when the tunnel between the user side and the virtual access gateway is SRv6, and the user message is further encapsulated into a VLAN message by the ONU, the user identifier can be the VLAN information in the VLAN message; of course, the user identifier can also be a self-defined identifier. Considering that the current new metropolitan area network generally uses SRv6 tunnel for communication, in the embodiment of the present application, the user message can be encapsulated in VLAN and SRv6 protocols, and the user identifier can be the VLAN information in the VLAN message.

[0091] Based on this, extracting the user identifier and the user message from the first tunnel message, and determining the corresponding virtual service gateway of the user side according to the user identifier can include:

[0092] Step 11: extracting a VLAN message from the first tunnel message;

[0093] Step 12: extracting VLAN information and a user message from the VLAN message;

[0094] Step 13: determining a virtual service gateway corresponding to the user side according to the VLAN information.

[0095] It should be noted that the embodiments of the present application do not limit the specific structure of the VLAN information, which can be a single-layer structure or a multi-layer structure. It can be understood that when the VLAN information is a multi-layer structure, it can distinguish more user sides.

[0096] Further, in order to analyze the VLAN message specifically, a dedicated VLAN processing logic can also be set in the virtual access gateway. Further, the tunnel protocol processing logic can distribute the obtained VLAN message to the corresponding VLAN processing logic for processing after completing the tunnel message analysis. In order to improve the communication efficiency, the tunnel protocol processing logic and the VLAN processing logic can communicate through a memory interface (memif).

[0097] S203, sending the user message to the virtual service gateway, so that the virtual service gateway performs service processing and network address translation on the user message, and sends the processed user message to a bridge port corresponding to the traffic type of the user message in the virtual access gateway.

[0098] As described above, after completing the processing of the user message, the virtual service gateway also needs to distribute the processed user message to the virtual access gateway according to the traffic type to which the user message belongs, so that the virtual access gateway sends the processed user message to the corresponding service server. In order to facilitate distribution, a plurality of bridge ports (Bridge-Domain, bridge domain) can also be set in the virtual access gateway, which are used to distribute the traffic of the user side and the traffic of the service server side. The distribution process based on the bridge port can be: 1, the virtual access gateway sends the user message to the virtual service gateway through the bridge port corresponding to the user side; 2, the virtual service gateway can return the user message processed by the service to the bridge port corresponding to the traffic type and the service server in the virtual access gateway, and the virtual access gateway only needs to determine the service server according to the bridge port receiving the processed user message. It can be seen that in the embodiments of the present application, the relationship between the virtual access gateway and the virtual service gateway is only a simple message forwarding relationship, and the two gateways do not need to maintain a connection relationship, and thus the access logic and the service logic can be effectively separated, so that the access logic and the service logic are processed in two independent planes.

[0099] Further, it is worth pointing out that the virtual service gateway and the virtual access gateway can be set in the same edge device in the form of virtual machines. At this time, the virtual service gateway can be set with a memory interface (such as memif and vhostuser), so that the virtual service gateway and the virtual access gateway can communicate through the memory interface, wherein the memory interface is a network virtualization interface that can be used to forward data packets from one virtual machine to another. Considering that the two edge cloud gateways can directly communicate through memory, the communication efficiency between the two edge cloud gateways can be significantly improved. Further, similar to the bridge port described above, the virtual service gateway can also be set with multiple memory interfaces for splitting the traffic on the user side and the traffic on the service server side. That is, the memory interface corresponds to the bridge port. Further, the virtual access device needs to send the user message to the virtual service gateway through the corresponding memory interface, and the virtual service gateway also needs to return the processed user message to the virtual access gateway through the corresponding memory interface

[0100] Based on this, sending the user message to the virtual service gateway can include:

[0101] Step 21: sending the user message to the first memory interface of the virtual service gateway;

[0102] Further, to improve the resource utilization of the virtual service gateway, multiple user sides can share the same virtual service gateway, and multiple virtual gateways (vGWs) can be further arranged in the gateway. The virtual gateways can be isolated by technologies such as vRF (Virtual Routing Forwarding) and namespace, and the correspondence between the virtual gateways and the user sides is one-to-one. At this time, the user identifier of the user side can also be used to determine the virtual gateway corresponding to the user side. Specifically, when the user identifier is VNI or single-layer VLAN information, the virtual access gateway can determine the virtual service gateway corresponding to the user identifier according to preset routing information, and forward the user identifier and the user packet to the virtual service gateway, so that the virtual service gateway further determines the virtual gateway corresponding to the user side according to the user identifier, and forwards the user packet to the virtual gateway for processing. When the user identifier is multi-layer VLAN information, the virtual access gateway can also determine the virtual service gateway and the virtual gateway corresponding to the user side by layer-by-layer matching. In a preferred case, the VLAN packet can be encapsulated in a QinQ format. The QinQ packet usually contains inner VLAN information (CVLAN) and outer VLAN information (SVLAN), wherein the inner VLAN information belongs to the VLAN information of the user side and is encapsulated by the ONU device of the user side; and the outer VLAN information belongs to the VLAN information of the operator and is encapsulated by the OLT (optical line terminal) device of the operator. The relationship between the ONU device and the OLT device is many-to-one, that is, multiple user sides can access the same OLT device. Further, the virtual access gateway can determine the virtual service gateway corresponding to the user side according to the outer VLAN information in the VLAN packet, and send the user packet and the inner VLAN information to the virtual service gateway; and the virtual service gateway can determine the virtual gateway of the user side according to the inner VLAN information, and forward the user packet to the virtual gateway for service processing and network address translation.

[0103] Based on this, the VLAN information includes inner VLAN information and outer VLAN information, and determining the virtual service gateway corresponding to the user side according to the VLAN information can include:

[0104] Step 31: determining the virtual service gateway corresponding to the user side according to the outer VLAN information.

[0105] Correspondingly, sending the user packet to the virtual service gateway can include:

[0106] Step 32: sending the user message and the inner-layer VLAN information to the virtual service gateway, so that the virtual service gateway determines the corresponding virtual gateway on the user side according to the inner-layer VLAN information, and sends the user message to the virtual gateway for service processing and network address translation.

[0107] S204: receiving the processed user message through the bridge port, encapsulating the processed user message into a second tunnel message, and sending the second tunnel message to the service server corresponding to the bridge port.

[0108] After receiving the processed user message through the bridge port, the virtual access gateway can determine the service server corresponding to the message according to the bridge port, and send the processed user message to the service server corresponding to the bridge port. As described above, the virtual access gateway and the service server also communicate through tunnels, so the processed user message needs to be encapsulated into a tunnel message based on the tunnel identifier of the tunnel corresponding to the service server, so as to be transmitted to the service server. It should be pointed out that "second" in "second tunnel message" is only used to distinguish the tunnel message sent to the service server from the tunnel message from the user side. The encapsulation method of the second tunnel message is not limited by the embodiments of the present application, which is related to the specific type of tunnel, and can refer to the related technology of the tunnel.

[0109] It should be pointed out that the second tunnel has a one-to-one relationship with the type of service server, that is, one type of service server corresponds to one tunnel. The embodiments of the present application do not limit the type of tunnel between the service server and the virtual access gateway, which can be VxLAN tunnel or SRv6 tunnel. In actual application, when the service server includes cloud server and broadband access server, the tunnel corresponding to the cloud server can be VxLAN tunnel, and the tunnel corresponding to the broadband access server can be SRv6. Further, in order to effectively distinguish the tunnels and separate the message processing logic, the virtual access gateway can also be provided with tunnel protocol processing logic (such as SRv6 processing logic, VxLAN processing logic) corresponding to the tunnel of the service server, and the tunnel identifier (such as SID) of the tunnel and the tunnel protocol processing logic are established in a corresponding relationship. Further, the tunnel protocol processing logic can receive the processed user message of the virtual service gateway, and perform the steps of encapsulating the processed user message into a second tunnel message, and sending the second tunnel message to the service server corresponding to the bridge port.

[0110] Further, to facilitate the business server to identify the user, the virtual service gateway can also re-label the original inner VLAN information for the processed user message after completing the processing of the user message, and return the processed user message to the virtual access gateway; meanwhile, the virtual access gateway can also further re-label the outer VLAN information for the processed user message to obtain an updated VLAN message, and then send the updated VLAN message to the business server. In this way, the business server can effectively distinguish different users based on the inner VLAN information and the outer VLAN information.

[0111] Based on this, the processed user message is labeled with the inner VLAN information, and before the processed user message is encapsulated into the second tunnel message, the following can also be included:

[0112] Step 41: Labeling the outer VLAN information for the processed user message to obtain an updated VLAN message.

[0113] Correspondingly, encapsulating the processed user message into the second tunnel message includes:

[0114] Step 42: Encapsulating the updated VLAN message into the second tunnel message. It is worth noting that, to encapsulate the VLAN message specifically, the virtual access gateway can also be provided with a dedicated VLAN processing logic, which is used to receive the user message returned by the virtual service gateway, execute step 41, and send the encapsulated VLAN message to the tunnel protocol processing logic corresponding to the business server for tunnel message encapsulation and sending. In other words, the user message returned by the virtual service gateway can be received by the VLAN processing logic or the tunnel protocol processing logic. The bridge port corresponding to the business server can be set in the VLAN processing logic or the tunnel protocol processing logic. In this way, the embodiments of the present application can freely adapt to various message encapsulation requirements by flexibly setting the VLAN processing logic and the tunnel protocol processing logic.

[0115] Further, the virtual service gateway can also be provided with a memory interface corresponding to the business server, and thus the processed user message can be returned to the specified bridge port of the virtual access gateway through the memory interface.

[0116] Based on this, receiving the processed user message through the bridge port can include:

[0117] Step 51: Receiving the processed user message returned by the virtual service gateway through the second memory interface through the bridge port.

[0118] Based on the above embodiment, the application can divide the access function and service processing to the virtual access gateway and the virtual service gateway respectively. Specifically, the virtual access gateway can receive the first tunnel message from the user side, and extract the user identifier and the user message from the first tunnel message. Then, it can determine the virtual service gateway corresponding to the user side according to the user identifier, and send the user message to the virtual service gateway, so that the virtual service gateway performs service processing and network address translation on the user message, and sends the processed user message to the bridge port corresponding to the traffic type of the user message in the virtual service gateway. Further, the virtual access gateway can also send the processed user message to the service server corresponding to the bridge port when receiving the processed user message through the bridge port. That is, the virtual access gateway in the application can provide traffic access for the user side, and can forward the user traffic east-west and north-south, while the virtual service gateway can provide intranet service function for the user side, and can perform traffic distribution according to the type of user traffic. Further, the application can divide the access logic and service logic according to the division level, so as to ensure the clarity of the user access logic and service logic.

[0119] Based on the above embodiment, the implementation of the method on the virtual service gateway side will be introduced below. Please refer to Figure 3 , Figure 3 The flowchart of the gateway processing method provided by the embodiment of the application can include:

[0120] S301, receiving the user message from the user side sent by the virtual access gateway.

[0121] As described above, the virtual service gateway can be provided with a plurality of memory interfaces for distributing the traffic of the user side and the traffic of the service server side. Therefore, the virtual service gateway can receive the user message of the user side through the memory interface corresponding to the user side.

[0122] Based on this, receiving the user message from the user side sent by the virtual access gateway can include:

[0123] Step 61: receiving the user message sent by the virtual access gateway through the first memory interface.

[0124] S302, determining the traffic type of the user message, and performing service processing and network address translation on the user message.

[0125] In the embodiment of the present application, the virtual service gateway is responsible for service processing and network address translation, wherein the service processing can include any one or a combination of DHCP, PPPoE dialing, IPoE dialing, QOS or security authentication. In addition, the virtual service gateway can also identify the traffic type of the user message and distribute the user message to the corresponding service server based on the traffic type, for example, distributing the user message belonging to the online traffic to the broadband access server and distributing the user message belonging to the cloud traffic to the cloud server. It should be noted that the embodiment of the present application does not limit how to identify the user message, which can be identified according to the payload contained in the user message, and the specific identification can refer to the related technology of network communication.

[0126] Further, the virtual service gateway can be divided into multiple virtual gateways, and each user side can be allocated a corresponding virtual gateway. In other words, the virtual service gateway can be shared by multiple user sides, thereby significantly improving the resource utilization of the virtual service gateway. As described above, the VLAN message from the user side in the embodiment of the present application can be encapsulated in QinQ format, and the QinQ format can include inner VLAN information and outer VLAN information, wherein the outer VLAN information is used to determine the corresponding virtual service gateway of the user side, and the inner VLAN information is used to determine the corresponding virtual gateway of the user side.

[0127] Based on this, receiving the user message from the user side sent by the virtual access gateway can include:

[0128] Step 71: receiving the user message from the user side and the inner VLAN information sent by the virtual access gateway;

[0129] Correspondingly, the service processing and network address translation of the user message can include:

[0130] Step 72: determining the corresponding virtual gateway of the user side according to the inner VLAN information, and sending the user message to the virtual gateway for service processing and network address translation.

[0131] S303, sending the processed user message to the bridge port corresponding to the traffic type in the virtual access gateway, so that the virtual access gateway sends the processed user message to the service server corresponding to the bridge port.

[0132] As described above, to ensure correct shunting, the virtual access gateway can be configured with bridge ports corresponding to traffic types and service servers. Further, after completing service processing and network address translation, the virtual service gateway only needs to send the processed user message to the bridge port in the virtual service gateway corresponding to the traffic type. Further, as described above, the virtual service gateway can be configured with memory interfaces corresponding to message types and service servers, and then after determining the traffic type, it can send the processed user message to the bridge port in the virtual service gateway corresponding to the traffic type through the memory interface corresponding to the traffic type.

[0133] Based on this, sending the processed user message to the bridge port in the virtual access gateway corresponding to the traffic type includes:

[0134] Step 81: Send the processed user message to the bridge port in the virtual access gateway corresponding to the traffic type through the second memory interface.

[0135] Further, to facilitate the service server to identify the user side, before sending the processed user message to the virtual access gateway, the original inner VLAN information can also be encapsulated for the message; at the same time, the virtual access device can further encapsulate the original outer VLAN information for the processed user message, so that the service server can distinguish different users based on the inner VLAN information and the outer VLAN information. Of course, the service server can also distinguish different users based on the IP address contained in the processed user message.

[0136] Based on this, sending the processed user message to the bridge port in the virtual access gateway corresponding to the traffic type can include:

[0137] Step 91: Label the inner VLAN information for the processed user message, and send the labeled user message to the bridge port in the virtual access gateway corresponding to the traffic type.

[0138] The specific cases of two message shunting will be introduced below. When it is determined that the user message belongs to the online traffic type, the virtual service gateway can perform service processing on the user message, and perform network address translation on the user message based on the wide area network address (WAN) of the user side; then, the virtual service gateway can distribute the message to the bridge port in the virtual access gateway corresponding to the online traffic type, so that the latter forwards the user message to the broadband access server.

[0139] Based on this, determining the traffic type of the user message and performing service processing and network address translation on the user message can include:

[0140] Step 401, when determining that the user message is the online traffic type, processing the user message, and performing network address translation on the user message based on the wide area network address of the user side;

[0141] Correspondingly, the processed user message is sent to the bridge port corresponding to the traffic type in the virtual access gateway, which includes:

[0142] Step 402, the processed user message is sent to the bridge port corresponding to the online traffic type in the virtual access gateway, so that the virtual access gateway sends the processed user message to the broadband access server.

[0143] Of course, it should be noted that when the user side has not initiated dialing, the virtual service gateway will not be able to master its corresponding wide area network address. At this time, the virtual service gateway can initiate dialing to the broadband access server through the virtual access gateway to obtain the corresponding wide area network address of the user side.

[0144] Further, when determining that the user message belongs to the up-cloud traffic type, the virtual service gateway can process the user message, perform network address translation on the user message based on the private network address of the user side in the cloud, and modify the target address of the user message to the network address of the cloud server; Then, the virtual service gateway can distribute the message to the bridge port corresponding to the online traffic type in the virtual access gateway, so that the latter forwards the user message to the cloud server.

[0145] Based on this, determining the traffic type of the user message and processing and network address translation of the user message can include:

[0146] Step 501, when determining that the user message is the up-cloud traffic type, processing the user message, performing network address translation on the user message based on the private network address of the user side in the cloud, and modifying the target address of the user message to the network address of the cloud server;

[0147] Correspondingly, the processed user message is sent to the bridge port corresponding to the traffic type in the virtual access gateway, which includes:

[0148] Step 502, the processed user message is sent to the bridge port corresponding to the up-cloud traffic type in the virtual access gateway, so that the virtual access gateway sends the processed user message to the cloud server.

[0149] The fusion edge cloud gateway system and the related gateway processing method provided by the embodiment of the present application will be introduced completely based on multiple schematic diagrams. The fusion edge extends the home local area network to the edge cloud, deploys the computing power, storage and security and other capabilities in the edge cloud, and provides differentiated solutions for the home and small and medium-sized enterprises. The whole networking architecture is composed of the user local area network, the new metropolitan area network, the cloud gateway, the edge cloud, the security and the application ecology, as shown in Figure 4 . Figure 4 The schematic diagram of the networking architecture provided by the embodiment of the present application is shown.

[0150] Based on the above-mentioned networking architecture, the embodiment of the present application can provide two basic service bearing schemes, which are the Internet access and the local edge cloud service access respectively. Please refer to Figure 5 , Figure 5 The data flow schematic diagram under the Internet access scheme provided by the embodiment of the present application is shown. For the Internet access scheme, in the cloud network fusion edge networking, the user terminal is transmitted to the edge cloud gateway through the large two-layer network, and the user Internet access initiates the user PPPoE / IPoE dialing through the cloud gateway. The specific service bearing scheme is as follows:

[0151] 1. The ONU device is in the bridge mode, and the user two-layer message is transmitted;

[0152] 2. The EVPN VPLS / VPWS over SRv6 bearing is adopted between the switch Leaf and the cloud gateway, a plurality of cloud gateway instances are corresponding, and the user two-layer access is to the edge cloud gateway (vCPE);

[0153] 3. The edge cloud gateway identifies the home based on the QinQ, selects the cloud gateway instance to be distributed to the corresponding home, and allocates the internal private network address to each terminal in the home;

[0154] 4. The edge cloud gateway initiates the PPPoE / IPoE dialing to the vBRAS after identifying that the user flow is the online flow, the dialing message is sent to the vBRAS through the EVPN over SRv6 tunnel, and the user online WAN port address is obtained;

[0155] 5. After the dialing is successful, the user online flow is forwarded to the vBRAS based on the edge cloud gateway, and the Internet access can be realized.

[0156] Please refer to Figure 6 , Figure 6 The data flow schematic diagram under the local edge cloud service access scheme provided by the embodiment of the present application is shown. For the local edge cloud service access scheme, the edge cloud service requires that the user terminal and the cloud application are end-to-end connected, the flow is identified by the cloud gateway and forwarded to the service cloud gateway. The specific service bearing scheme is as follows:

[0157] 1. The process for users to access the edge cloud gateway is the same as that for internet access. The edge cloud gateway assigns private network addresses to terminals within the home.

[0158] 2. After the edge cloud gateway identifies the traffic as inbound traffic, it performs private network IP address translation via NAT to prevent IP address conflicts between different home terminals;

[0159] 3. For cloud services, the EVPN VPLS / VPWS over SRv6 tunnel starts from the virtual access gateway and runs to the virtual service gateway. All services can share a single EVPN.

[0160] 4. The virtual service gateway is responsible for authenticating users' access to cloud services. If the authentication is successful, the corresponding cloud service will be accessed; otherwise, a failure message will be returned.

[0161] To implement the above-mentioned service carrying solution, embodiments of the present invention can provide a converged edge cloud gateway system, which may specifically include a virtual access gateway (vSwitch) and a virtual service gateway (vCPE), and its main functions are as follows:

[0162] (1) vSwitch: vSwitch terminates SRv6, identifies households based on QinQ, selects vCPE instances to allocate to the corresponding households, and is responsible for forwarding edge application service flows to the corresponding DC.

[0163] (2) vCPE: It replicates the capabilities of the home ONU optical modem to provide intranet management functions, and at the same time, it distributes access to edge cloud resources based on the destination IP based on flow tables, and accesses the Internet through L3 forwarding. vCPE can be further divided into multiple vGWs. vGW is a logical unit on vCPE. It uses vRF or namespace to achieve the effect of multi-tenant isolation on a physical vCPE. In this way, a single vCPE can support a large number of users, achieving resource sharing and maximizing efficiency.

[0164] The aforementioned converged edge cloud gateway system architecture can be further deployed on a host machine that supports DPDK network cards, facilitating deployment on hardware architectures such as X86 servers, ARM servers, and domestic servers, thus meeting the requirements for high-performance message sending and receiving.

[0165] Based on the converged edge cloud gateway system provided in this embodiment of the invention, in order to implement the above-mentioned service carrying scheme, this embodiment of the invention can also provide two message sending and receiving processes, as follows:

[0166] Please refer to Figure 7 , Figure 7 This is a schematic diagram of a message sending and receiving process under an Internet access scheme provided in an embodiment of the present invention. The process specifically includes:

[0167] Step 0: receive the tunnel message from the home user through A-leaf, the encapsulation format has the SRv6 header containing the SID, and the inside is the QinQ message, and then the user's message.

[0168] Step 1: after the SRv6 processing logic of the vSwitch, the message matches the corresponding SID strategy, the SRv6 header is stripped, and the QinQ logic processing is given.

[0169] Step 2: QinQ processing logic, according to the outer SVLAN distribution corresponding bridge domain (Bridge Domain); the outer SVLAN is stripped.

[0170] Step 3: after step 2, the message exposes the CLAN header, and then is distributed to the corresponding vGW according to the CLAN.

[0171] Step 4: the message completes complete service processing in the vCPE, updates the message header, and is sent to the vSwitch through the interface after being marked with the CVLAN.

[0172] Step 5: after the vSwitch receives the message from the vCPE, similar to step 2, the corresponding bridge domain is found, and a new SVLAN is marked and sent to the SRv6 node.

[0173] Step 6: according to the SRv6 strategy, find the tunnel strategy to the BRAS, and encapsulate the SID header.

[0174] Step 7: send to the BRAS through the SRv6 tunnel.

[0175] Please refer to Figure 8 , Figure 8 The message transceiving flowchart under the local edge cloud service access scheme provided by the embodiment of the application, the flowchart specifically comprises:

[0176] Step 0: receive the tunnel message from the home user through A-leaf, the encapsulation format has the SRv6 header containing the SID, and the inside is the QinQ message, and then the user's message.

[0177] Step 1: after the SRv6 processing logic of the vSwitch, the message matches the corresponding SID strategy, the SRv6 header is stripped, and the QinQ logic processing is given.

[0178] Step 2: QinQ processing logic, according to the outer SVLAN distribution corresponding bridge domain (Bridge Domain); the outer SVLAN is stripped.

[0179] Step 3: after step 2, the message exposes the CLAN header, and then is distributed to the corresponding vGW according to the CLAN.

[0180] Step 4: The packet completes complete service processing in the vCPE, finds a routing table through a destination IP, and the service to the cloud service goes to a special out interface; after the packet updates the original address through NAT, VRF penetration (or other technologies) is needed at this time, the packet is sent to VRF0, and CVLAN is no longer needed; then the packet is sent to the vSwitch bridging port.

[0181] Step 5: The vSwitch accepts the packet from the vCPE and sends it to the SRv6 node for logical processing.

[0182] Step 6: According to the SRv6 strategy, find the tunnel strategy to the cloud service end, encapsulate the SID header, and send the packet to the cloud service end.

[0183] The virtual access gateway, the virtual service gateway, the converged edge cloud gateway system, the edge device and the computer readable storage medium provided by the embodiment of the application will be introduced below, and the virtual access gateway, the virtual service gateway, the converged edge cloud gateway system, the edge device and the computer readable storage medium described below can be mutually corresponding and referred to with the gateway processing method described above.

[0184] Please refer to Figure 9 , Figure 9 A schematic diagram of a virtual access gateway provided by the embodiment of the application can include:

[0185] The receiving module 901 is configured to receive a first tunnel packet from a user side;

[0186] The virtual service gateway confirmation module 902 is configured to extract a user identifier and a user packet from the first tunnel packet, and determine a virtual service gateway corresponding to the user side according to the user identifier;

[0187] The virtual service gateway forwarding module 903 is configured to send the user packet to the virtual service gateway, so that the virtual service gateway performs service processing and network address translation on the user packet, and sends the processed user packet to a bridging port corresponding to a traffic type of the user packet in the virtual access gateway;

[0188] The sending module 904 is configured to receive the processed user packet through the bridging port, encapsulate the processed user packet into a second tunnel packet, and send the second tunnel packet to a service server corresponding to the bridging port.

[0189] Optionally, the virtual service gateway confirmation module 902 can include:

[0190] The tunnel packet analysis submodule is configured to extract a VLAN packet from the first tunnel packet;

[0191] The VLAN message analysis submodule is configured to extract VLAN information and a user message from a VLAN message.

[0192] The virtual service gateway confirmation submodule is configured to determine a virtual service gateway corresponding to the user side according to the VLAN information.

[0193] Optionally, the VLAN information comprises inner-layer VLAN information and outer-layer VLAN information, and the virtual service gateway confirmation submodule can comprise:

[0194] The virtual service gateway determination unit is configured to determine a virtual service gateway corresponding to the user side according to the outer-layer VLAN information.

[0195] Correspondingly, the virtual service gateway forwarding module 903 can also be configured to:

[0196] send the user message and the inner-layer VLAN information to the virtual service gateway, so that the virtual service gateway determines a virtual gateway corresponding to the user side according to the inner-layer VLAN information, and sends the user message to the virtual gateway for service processing and network address translation.

[0197] Optionally, the processed user message is marked with the inner-layer VLAN information, and the sending module 904 can further comprise:

[0198] The marking submodule is configured to mark the processed user message with outer-layer VLAN information to obtain an updated VLAN message.

[0199] The encapsulation submodule is configured to encapsulate the updated VLAN message into a second tunnel message.

[0200] Optionally, the virtual service gateway forwarding module 903 can further comprise:

[0201] The forwarding submodule is configured to send the user message to a first memory interface of the virtual service gateway.

[0202] The sending module 904 can further comprise:

[0203] The receiving submodule is configured to receive, through the bridging port, a processed user message returned by the virtual service gateway through a second memory interface.

[0204] Optionally, the service server is a cloud server or a broadband access server.

[0205] Please refer to Figure 10 , Figure 10 A structure block diagram of a virtual service gateway provided by the embodiment of the application can comprise:

[0206] The receiving module 1001 is configured to receive a user message from a user side sent by a virtual access gateway.

[0207] The service processing module 1002 is configured to determine the traffic type of the user message, and perform service processing and network address translation on the user message.

[0208] The sending module 1003 is configured to send the processed user message to a bridge port corresponding to the traffic type in the virtual access gateway, so that the virtual access gateway sends the processed user message to a service server corresponding to the bridge port.

[0209] Optionally, the receiving module 1001 can be further configured to:

[0210] receive the user message and the inner VLAN information from the user side sent by the virtual access gateway;

[0211] Correspondingly, the service processing module 1002 can be further configured to:

[0212] determine the virtual gateway corresponding to the user side according to the inner VLAN information, and send the user message to the virtual gateway for service processing and network address translation.

[0213] Optionally, the sending module 1003 can be further configured to:

[0214] label the inner VLAN information for the processed user message, and send the labeled user message to the bridge port corresponding to the traffic type in the virtual access gateway.

[0215] Optionally, the receiving module 1001 can be further configured to:

[0216] receive the user message sent by the virtual access gateway through the first memory interface;

[0217] Correspondingly, the sending module 1003 can be further configured to:

[0218] send the processed user message to the bridge port corresponding to the traffic type in the virtual access gateway through the second memory interface.

[0219] Optionally, the service processing module 1002 can be further configured to:

[0220] when determining that the user message is of the online traffic type, perform service processing on the user message, and perform network address translation on the user message based on the wide area network address of the user side;

[0221] Correspondingly, the sending module 1003 can be further configured to:

[0222] send the processed user message to a bridge port corresponding to the online traffic type in the virtual access gateway, so that the virtual access gateway sends the processed user message to a broadband access server.

[0223] Optionally, the service processing module 1002 can also be configured to:

[0224] when determining that the user packet is of the cloud-in traffic type, performing service processing on the user packet, performing network address translation on the user packet based on the private network address corresponding to the user side in the cloud, and modifying the target address of the user packet to the network address of the cloud server;

[0225] Correspondingly, the sending module 1003 can also be configured to:

[0226] send the processed user packet to the bridge port corresponding to the cloud-in traffic type in the virtual access gateway, so that the virtual access gateway sends the processed user packet to the cloud server.

[0227] Optionally, the service processing includes any one or a combination of multiple of DHCP, PPPoE dialing, QOS, or security authentication.

[0228] For the above Figure 11 , Figure 11 Another structure block diagram of the converged edge cloud gateway system provided by the embodiment of the present application includes a virtual access gateway 21 and a virtual service gateway 22.

[0229] The virtual access gateway 21 is configured to perform the gateway processing method applied to the virtual access gateway as above.

[0230] The virtual service gateway 22 is configured to perform the gateway processing method applied to the virtual service gateway as above.

[0231] Since the embodiments of the converged edge cloud gateway system part correspond to the embodiments of the gateway processing method part, the embodiments of the converged edge cloud gateway system part are described in the description of the embodiments of the gateway processing method part, and will not be repeated here.

[0232] The embodiment of the present application further provides an edge device, which can include:

[0233] a memory configured to store a computer program;

[0234] a processor configured to execute the computer program to implement the gateway processing method applied to the virtual access gateway and / or the gateway processing method applied to the virtual service gateway as above.

[0235] Since the embodiments of the edge device part correspond to the embodiments of the gateway processing method part, the embodiments of the edge device part are described in the description of the embodiments of the gateway processing method part, and will not be repeated here.

[0236] Optionally, the edge device can also support a DPDK network card to facilitate deployment of X86 servers / ARM / domestic servers and other hardware architectures, so as to meet the demand for high-performance message sending and receiving.

[0237] The embodiment of the application further provides a computer readable storage medium, and the computer readable storage medium stores a computer program.

[0238] Since the embodiment of the computer readable storage medium part corresponds to the embodiment of the gateway processing method part, the embodiment of the storage medium part is described with reference to the embodiment of the gateway processing method part, and details are not described herein.

[0239] The embodiments in the specification are described in a progressive manner, and each embodiment focuses on the difference from other embodiments, and the same or similar parts of each embodiment can be referred to each other.

[0240] The skilled person can further realize that the units and algorithm steps of each example described in combination with the embodiments disclosed herein can be realized by electronic hardware, computer software or a combination of both, and the constitution and steps of each example have been described in the above description in general terms in order to clearly show the interchangeability of hardware and software. Whether the functions are realized in hardware or software depends on the specific application and design constraints of the technical solution. The skilled person can use different methods to realize the described functions for each specific application, but such implementation should not be considered beyond the scope of the application.

[0241] The steps of the method or algorithm described in combination with the embodiments disclosed herein can be directly implemented by hardware, a software module executed by a processor, or a combination of both. The software module can be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0242] The above describes in detail the gateway processing method, the virtual access gateway, the virtual service gateway, the converged edge cloud gateway system, the edge device and the computer readable storage medium provided by the present application. The principles and implementation modes of the present application are described by applying specific examples. The above description of the examples is only used to help understand the method of the present application and its core idea. It should be pointed out that, for those skilled in the art, without departing from the principles of the present application, the present application can be improved and modified in several ways, and these improvements and modifications also fall within the protection scope of the claims of the present application.

Claims

1. A gateway processing method, characterized by, The method is applied to a virtual access gateway, and the method comprises the following steps: receiving a first tunnel message from a user side; extracting a user identifier and a user message from the first tunnel message, and determining a virtual service gateway corresponding to the user side according to the user identifier; sending the user message to a bridge port corresponding to the user side in the virtual service gateway through a first memory interface of the virtual service gateway, so that the virtual service gateway performs service processing and network address translation on the user message, and sends the processed user message to a bridge port corresponding to a traffic type and a service server in the virtual service gateway through a second memory interface of the virtual access gateway; wherein the first memory interface corresponds to the bridge port corresponding to the user side, and the second memory interface corresponds to the bridge port corresponding to the traffic type and the service server; receiving the processed user message through the bridge port corresponding to the traffic type and the service server, encapsulating the processed user message into a second tunnel message, and sending the second tunnel message to a service server corresponding to the bridge port corresponding to the traffic type and the service server; the step of extracting the user identifier and the user message from the first tunnel message, and determining the virtual service gateway corresponding to the user side according to the user identifier comprises the following steps: extracting a VLAN message from the first tunnel message; extracting VLAN information and the user message from the VLAN message; wherein the VLAN information comprises inner-layer VLAN information and outer-layer VLAN information; determining the virtual service gateway corresponding to the user side according to the outer-layer VLAN information; the step of sending the user message to the bridge port corresponding to the user side in the virtual service gateway through the first memory interface of the virtual service gateway comprises the following step: sending the user message and the inner-layer VLAN information to the virtual service gateway, so that the virtual service gateway determines the virtual gateway corresponding to the user side according to the inner-layer VLAN information, and sends the user message to the virtual gateway for service processing and network address translation; wherein the virtual gateways are isolated through a virtual routing forwarding technology or a namespace technology.

2. The gateway processing method of claim 1, wherein, the processed user message is marked with the inner-layer VLAN information, and before the processed user message is encapsulated into the second tunnel message, the method further comprises the following steps: marking the processed user message with the outer-layer VLAN information to obtain an updated VLAN message; correspondingly, the step of encapsulating the processed user message into the second tunnel message comprises the following step: encapsulating the updated VLAN message into the second tunnel message.

3. The gateway processing method according to claim 1 or 2, characterized by, The service server is a cloud server or a broadband access server.

4. A gateway processing method, characterized by, The method is applied to a virtual service gateway, and the method comprises the following steps: receiving a user message from a user side sent by a virtual access gateway through a first memory interface of the virtual service gateway through a bridge port corresponding to the user side; wherein the first memory interface corresponds to the bridge port corresponding to the user side; determining a traffic type of the user message, and performing service processing and network address translation on the user message; sending the processed user message to a bridge port corresponding to the traffic type and the service server in the virtual access gateway, so that the virtual access gateway sends the processed user message to the service server corresponding to the bridge port corresponding to the traffic type and the service server; wherein the second memory interface corresponds to the bridge port corresponding to the traffic type and the service server; the receiving of the user message from the user side and the inner VLAN information sent by the virtual access gateway, through the bridge port corresponding to the user side, comprises: receiving the user message from the user side and the inner VLAN information sent by the virtual access gateway; the service processing and network address translation on the user message, comprises: determining a virtual gateway corresponding to the user side according to the inner VLAN information, and sending the user message to the virtual gateway for service processing and network address translation; wherein the virtual gateways are isolated through virtual routing forwarding technology or namespace technology.

5. The gateway processing method of claim 4, wherein, the sending of the processed user message to the bridge port corresponding to the traffic type in the virtual access gateway, comprises: labeling the inner VLAN information for the processed user message, and sending the labeled user message to the bridge port corresponding to the traffic type in the virtual access gateway.

6. The gateway processing method of claim 4, wherein, the determination of the traffic type of the user message, and the service processing and network address translation on the user message, comprises: when the user message is determined to be an online traffic type, performing service processing on the user message, and performing network address translation on the user message based on the wide area network address of the user side; correspondingly, the sending of the processed user message to the bridge port corresponding to the traffic type in the virtual access gateway, comprises: sending the processed user message to the bridge port corresponding to the online traffic type in the virtual access gateway, so that the virtual access gateway sends the processed user message to the broadband access server.

7. The gateway processing method of claim 4, wherein, the determination of the traffic type of the user message, and the service processing and network address translation on the user message, comprises: when the user message is determined to be an online traffic type, performing service processing on the user message, and performing network address translation on the user message based on the wide area network address of the user side; correspondingly, the sending of the processed user message to the bridge port corresponding to the traffic type in the virtual access gateway, comprises: sending the processed user message to the bridge port corresponding to the online traffic type in the virtual access gateway, so that the virtual access gateway sends the processed user message to the broadband access server.

8. The gateway processing method according to any one of claims 4 to 7, characterized in that, the service processing comprises any one or a combination of DHCP, PPPoE dialing, IPoE dialing, QOS or security authentication.

9. A virtual access gateway, comprising: The application comprises: a receiving module for receiving a first tunnel message from a user side; a virtual service gateway confirmation module for extracting a user identifier and a user message from the first tunnel message and determining a virtual service gateway corresponding to the user side according to the user identifier; a virtual service gateway forwarding module for sending the user message to a bridge port corresponding to the user side in the virtual service gateway through a first memory interface of the virtual service gateway, so that the virtual service gateway performs service processing and network address translation on the user message and sends the processed user message to a bridge port corresponding to a traffic type and a service server pair in the virtual access gateway through a second memory interface of the virtual access gateway; wherein the first memory interface corresponds to the bridge port corresponding to the user side, and the second memory interface corresponds to the bridge port corresponding to the traffic type and the service server pair; a sending module for receiving the processed user message through the bridge port corresponding to the traffic type and the service server pair, encapsulating the processed user message into a second tunnel message, and sending the second tunnel message to a service server corresponding to the bridge port corresponding to the traffic type and the service server pair; the virtual service gateway confirmation module comprises: a tunnel message analysis submodule for extracting a VLAN message from the first tunnel message; a VLAN message analysis submodule for extracting VLAN information and the user message from the VLAN message; wherein the VLAN information comprises inner-layer VLAN information and outer-layer VLAN information; a virtual service gateway determination unit for determining the virtual service gateway corresponding to the user side according to the outer-layer VLAN information; the virtual service gateway forwarding module is configured to: send the user message and the inner-layer VLAN information to the virtual service gateway, so that the virtual service gateway determines the virtual gateway corresponding to the user side according to the inner-layer VLAN information and sends the user message to the virtual gateway for service processing and network address translation; wherein the virtual gateways are isolated through a virtual routing forwarding technology or a namespace technology.

10. A virtual service gateway, comprising: The application comprises: a receiving module for receiving a user message from a user side sent by a virtual access gateway through a first memory interface of a virtual service gateway through a bridge port corresponding to the user side; wherein the first memory interface corresponds to the bridge port corresponding to the user side; a service processing module for determining a traffic type of the user message and performing service processing and network address translation on the user message; a sending module for sending the processed user message to a bridge port corresponding to a traffic type and a service server pair in the virtual access gateway through a second memory interface of the virtual access gateway, so that the virtual access gateway sends the processed user message to a service server corresponding to the bridge port corresponding to the traffic type and the service server pair; wherein the second memory interface corresponds to the bridge port corresponding to the traffic type and the service server pair. The receiving user message from the user side sent by the virtual access gateway comprises: Receiving the user message from the user side sent by the virtual access gateway and the inner VLAN information; The service processing and network address translation of the user message comprises: According to the inner VLAN information, determining the corresponding virtual gateway of the user side, and sending the user message to the virtual gateway for service processing and network address translation; wherein the virtual gateways are isolated through virtual routing forwarding technology or namespace technology.

11. A converged edge cloud gateway system, comprising: Comprise: Virtual access gateway and virtual service gateway; The virtual access gateway is used for executing the gateway processing method in any one of claims 1 to 3; The virtual service gateway is used for executing the gateway processing method in any one of claims 4 to 8.

12. An edge device, characterized by Comprise: Memory for storing computer programs; The processor is used for executing the gateway processing method in any one of claims 1 to 3 and / or the gateway processing method in any one of claims 4 to 8 when the computer program is executed.

13. A computer-readable storage medium, characterized in that, The computer readable storage medium stores computer executable instructions, and when the computer executable instructions are loaded and executed by the processor, the gateway processing method in any one of claims 1 to 3 and / or the gateway processing method in any one of claims 4 to 8 is realized.

Images